TOMCAT CVE-2025-24813 Lucee unaffected as distributed

[Zackster]

I am preparing a 5.4.7 LTS release with the latest Tomcat and Java versions

https://luceeserver.atlassian.net/browse/LDEV-5409

Remember 5.4 LTS is in EOL as of December 31st, 2025 as per our Roadmap

It’s time to start planning to upgrade to 6.2

Lucee Roadmap 2025

Now that we finally got 6.2.0.321 out the door, time for a roadmap update Lucee 5.4 - LTS 5.4 is only going to receive urgent security updates until December 31st 2025 and is no longer being developed. It’s time to start planning an upgrade. Lucee 6.2.1 This will be a quick follow up bug fix release, following up 6.2.0 addressing any regressions found with 6.2.0 I have been working on addressing some long standing session management and cookie related bugs, you can see the progress in this ep…